SECTION 1 – WHAT DO WE DO WITH YOUR INFORMATION? When you place an order or purchase something from our website or mobile application, as part of the service provided, we collect the personal information provided by you give us such as your name, email address and mobile number, together with information we learn about you from your use of our service and your visits to our web site and other sites accessible from them. Further information required to provide services such as order and payment sharing will require access to your contacts on your mobile phone We may also collect additional information in connection with your participation in any promotions or competitions offered by us and information you provide when giving us feedback. When you browse our website, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system. We will use your information to provide and personalise our service. We will also use your contact details to communicate with you. We may use your information to send you offers and news about ECafe products and services or those of other carefully selected companies or restaurants which we think may be of interest to you. We may contact you by post, email, telephone (including SMS), fax, or mobile push notifications for these purposes. Your confirmation and receipt e-mails (which may include details of restaurant bookings or other services booked through our services) may include marketing material which we may feel will be of interest to you from other third parties. The information that you provide to us will be held in our systems, which are located on our premises or those of an appointed third party. We may also allow access to your information by other third parties who act for us for the purposes set out in this policy or for other purposes approved by you. It is possible that your data may be processed outside of India. Your data may be used for the following purposes: accounting, billing and audit, credit or other payment card verification and screening, safety, security, health, administrative and legal purposes, statistical and marketing analysis, systems testing, maintenance and development, customer surveys, customer relations and to help us in any future dealings with you, for example by identifying your requirements and preferences. SECTION 2 – CONSENT How do you get my consent? When you provide us with personal information to complete a transaction, use our services, verify your preferences, place an order, complete a payment or process a refund, we imply that you consent to our collecting it and using it for that specific reason only. In instances where we gather other information available through accessing functionality provided by your phone, including but not limited to your location or mobile phone contacts, we will expressly ask for your consent to provide access to said functionality. We may also use and analyse the information that we collect so that we can administer, support, improve and develop our business If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no. How do I withdraw my consent? If after you opt-in, you change your mind, you may withdraw your consent for us any time by disabling mobile application access to your mobile phone functionalities. Furthermore, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at padidocumentation@gmail.com or mailing us at: ToBox Ventures Private Limited No. 1/4, Unit 2C, 2nd Floor, 1st Cross, Wilson Garden, Hosur Main Road, Bangalore – 560027 SECTION 3 – DISCLOSURE We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service. SECTION 4 – PAYMENT We use Razorpay for processing payments. We/Razorpay do not store your card data on their servers. The data is encrypted through the Payment Card Industry Data Security Standard (PCI-DSS) when processing payment. Your purchase transaction data is only used as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is not saved. Our payment gateway adheres to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express and Discover. PCI-DSS requirements help ensure the secure handling of credit card information by our store and its service providers. For more insight, you may also want to read terms and conditions of razorpay on https://razorpay.com SECTION 5 – THIRD-PARTY SERVICES In general, the third-party providers used by us will only collect, use and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions. For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers. In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located. Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service. Links When you click on links on our website or mobile application, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements. SECTION 6 – SECURITY To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered or destroyed. SECTION 7 – COOKIES We use cookies to maintain sessions of your user ID. It is not used to personally identify you on our or other websites. SECTION 8 – AGE OF CONSENT By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site. SECTION 9 – CHANGES TO THIS PRIVACY POLICY We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it. If our website or mobile application is acquired or merged with another company, your information may be transferred to the new owners so that we may continue to sell products and services to you. QUESTIONS AND CONTACT INFORMATION If you would like to: access, correct, amend or delete any personal information we have about you, register a complaint, or simply want more information contact our Privacy Compliance Officer at padidocumentation@gmail.com or by mail at: ToBox PADI Near Colaco Hospital,
2nd Cross Road, Lower Bendoor, Mangalore -575 002,Karnataka, INDIA [Re: Privacy Compliance Officer] [ToBox PADI, Near Colaco Hospital, 2nd Cross Road, Lower Bendoor, Mangalore -575 002,Karnataka, INDIA]